/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
package controller;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.*;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpSession;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import data.Connect;
import data.Constant;
import data.Role_Grant;
import data.UserInfo;
import data.List_User;
/**
 *
 * @author NS
 */
@WebServlet(name = "grantRole", urlPatterns = {"/grantRole"})
public class grantRole extends HttpServlet {

    /**
	 * 
	 */
	private static final long serialVersionUID = 1L;

	/** 
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        HttpSession session = request.getSession();
        String [] array = new String[20];
        try {
            array = request.getParameterValues("profileList");
            String role = "";
            for(int i = 0; i < array.length ; i++){
                if(i == array.length - 1){
                    role = role.concat(array[i]);
                }
                else{
                    role = role.concat(array[i]+",");
                }
            }
            System.out.println("role = " + role);
            //Connect to database
            Connect connection = new Connect();
            String mess = connection.connectData(Constant.OracleAdminUsr,Constant.OracleAdminPwd);
            
            if(!mess.equals("success")){
                out.println(mess);
                return;
            }
            String username = (String)session.getAttribute("username");
            
            //Grant role to user
            Role_Grant r = new Role_Grant(connection.getConnection());
            r.grant(username, role);
            
            //Get username of current user
            UserInfo user     = (UserInfo)session.getAttribute("user");
            
            //Update the list
            List_User l = new List_User(connection.getConnection());
            ArrayList<UserInfo> list = l.queryUserList(user.getUsername());
            //Set attribute
            if(username.equals(user.getUsername())){
                session.setAttribute("user", user);
            }
            session.setAttribute("userList", list);
            
            String url = "/UserInfo.jsp";
            RequestDispatcher dispatcher = request.getServletContext().getRequestDispatcher(url);
            dispatcher.forward(request, response);
        }catch(Exception e){
            out.println(e);
        }
        finally {            
            out.close();
        }
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** 
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Returns a short description of the servlet.
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>
}
